CVE-2026-64225

Analyzed Analyzed - Analysis Complete

Out-of-Bounds Access in Linux Kernel Octeontx2-AF Driver

Publication date: 2026-07-24

Last updated on: 2026-08-12

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_SPEED can yield values 0-15. If it returns a value >= 13, this causes an out-of-bounds array access. Add a bounds check and default to speed 0 if the index is out of range.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-24

Last Modified

2026-08-12

Generated

2026-08-14

AI Q&A

2026-07-24

EPSS Evaluated

2026-08-12

NVD

CVE-2026-64225

EUVD

EUVD-2026-48633

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.7 (inc) to 6.12.92 (exc)
linux	linux_kernel	From 6.13 (inc) to 6.18.34 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.11 (exc)
linux	linux_kernel	From 5.16 (inc) to 6.1.176 (exc)
linux	linux_kernel	From 6.2 (inc) to 6.6.143 (exc)
linux	linux_kernel	From 5.11 (inc) to 5.15.210 (exc)
linux	linux_kernel	From 4.20 (inc) to 5.10.259 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-129	The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

Attack-Flow Graph

Executive Summary

This is a vulnerability in the Linux kernel affecting the octeontx2-af driver. The issue involves an out-of-bounds array access in the cgx_speed_mbps array, which has only 13 elements. The RESP_LINKSTAT_SPEED response can return values from 0 to 15, and if it returns a value 13 or higher, it causes an out-of-bounds access. A bounds check has been added to prevent this by defaulting to speed 0 if the index is out of range.

Detection Guidance

This vulnerability involves an out-of-bounds array access in the Linux kernel's octeontx2-af driver. Detection requires checking kernel logs for crashes or errors related to the CGX module. Monitor for kernel oops messages or system hangs after network operations. No specific commands are provided in the context.

Impact Analysis

This vulnerability could lead to memory corruption or crashes in systems using the affected Linux kernel component. It may cause instability or denial of service if exploited, particularly in systems with Marvell OcteonTX2 hardware.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel issue involving an out-of-bounds array access in the Marvell OcteonTX2 network driver, which could lead to system instability or crashes but does not involve data exposure or privacy violations.

Mitigation Strategies

Update the Linux kernel to a patched version where the bounds check has been added. If immediate patching is not possible, restrict network operations involving the octeontx2-af driver until the update is applied.

Hi! I’m here to help you understand CVE-2026-64225. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70